har-validator

Registry deprecationdanger

The package is explicitly deprecated with the message “this library is no longer supported,” applying to the entire package. This is a severe adoption risk despite the repository remaining unarchived.

Release historydanger

The package has 55 releases since 2015, but none in the last 12 months and the latest release was July 30, 2020. The long release gap indicates the published dependency is no longer actively maintained.

Dangerous workflowscaution

One of two workflows uses pull_request_target, which warrants review because that workflow type can expose repository privileges to untrusted pull requests. No untrusted checkout or script-injection pattern was detected, limiting the concern.

Repo issue activitycaution

The repository has one open issue and ten open pull requests, with no issues or pull requests merged in the last month. The unmerged backlog provides some evidence of stalled project activity.

Security policycaution

The repository has no published security policy. That reduces transparency for reporting vulnerabilities, though it is secondary to the package’s explicit deprecation.